WVISA logo WVISA Visual install guide
Customer guide | WVISA 1.8.3.43

Install WVISA after purchase, step by step.

This guide shows exactly what a paid customer should do after checkout: download the tier-locked ZIP, verify it, extract it, run WVISA, complete intake, start the assessment, and open the report.

Start the guide Open text guide
Important pilot disclosure This current public build is unsigned and script-only while executable code signing is deferred. Customers should not disable antivirus to force WVISA to run. If the hash does not match the success page, or if antivirus names a specific infection, stop and contact WVISA support.

Install Steps

Use this section as the customer handoff guide. It avoids internal terms like bucket, manifest, R2 object key, package stage, or engagement storage rules.

Step 1

Open the paid success page.

After checkout, use the browser page WVISA sends you to. It should show the purchased tier, package version, file size, and SHA-256 hash.

  • Confirm the tier name matches what you bought.
  • Confirm the version shown is the current release.
  • Keep this page open until the file is verified.
Stop if the page is not on the WVISA site, the tier is wrong, or the download page looks unrelated to your purchase.
wvisa.org/success/small-business-security-review
Your WVISA package is readySmall Business Security Review
Paid
VersionWVISA v1.8.3.43
Current
SHA-256Shown on your success page
Verify
Step 2

Download the tier-locked ZIP.

Select the download button once. The file name should include your purchased tier and end in -script-only.zip.

  • Save the ZIP to Downloads or Desktop.
  • Do not rename it before verification.
  • Do not forward the success link. Treat it like a private receipt.
Stop if the file name does not say WVISA, the version is unexpected, or the package does not match the tier you purchased.
Downloads
ZIP
WVISA-v1.8.3.43-client-small-business-security-review-script-only.zipDownloaded from WVISA success page
Correct
ZIP
random-security-tool.zipNot a WVISA package name
Do not run
Step 3

Verify the SHA-256 hash.

The hash is the fingerprint of the downloaded file. The value from PowerShell must exactly match the SHA-256 shown on the WVISA success page.

  • Open PowerShell from the Start menu.
  • Run the command shown here with your actual ZIP path.
  • Compare the hash before extracting or running anything.
Stop if the hash is different. Do not run a package with a mismatched hash.
PowerShell
Get-FileHash -Algorithm SHA256 "C:\Users\YourName\Downloads\WVISA-v1.8.3.43-client-your-tier-script-only.zip"
Algorithm : SHA256
Hash      : COPY-THIS-AND-COMPARE-WITH-THE-SUCCESS-PAGE
Path      : C:\Users\YourName\Downloads\WVISA-v1.8.3.43-client-your-tier-script-only.zip
Step 4

Extract the ZIP before running WVISA.

Windows can preview ZIP contents like a folder, but WVISA needs to run from a real extracted folder so all scripts and config files are available.

  • Right-click the ZIP and select Extract All.
  • Use a normal folder such as Desktop or Downloads.
  • Open the extracted folder after extraction finishes.
Do not run Start-WVISA.cmd from inside the compressed ZIP preview.
Extracted WVISA folder
AssetsWVISA visual assets
ChecksAssessment checks
CMD
Start-WVISA.cmdRun this file after extraction
Click
Step 5

Run Start-WVISA.cmd.

WVISA validates its package first. In the verified test run, the script-only package printed “Runtime validation passed” before continuing.

  • Double-click Start-WVISA.cmd from the extracted folder.
  • Review any Windows or antivirus prompt before continuing.
  • Wait for package validation to complete.
Stop if Windows points to a different folder than the one you extracted, or if validation fails.
WVISA startup
Launcher prep: checking package scripts.Runtime validation starting.Runtime validation passed.
Step 6

Complete the customer intake.

WVISA needs current answers so the report reflects this customer and this run. Prior answers may help, but they should be reviewed and saved for the new assessment.

  • Select New Customer Intake.
  • Answer what you know about accounts, backups, router, family/household controls, and external exposure.
  • Save the intake before starting the assessment.
Do not skip intake if WVISA says the latest saved intake belongs to another engagement.
Customer Intake
Accounts
Which accounts matter most?
Backups
How do you recover files?
Router
Can you access the router app?
Save intake for this runRequired
Step 7

Start the assessment.

When intake is ready, start the scan. WVISA is designed as a read-only assessment workflow. Remediation steps are separate and require explicit approval.

  • Leave the computer awake while WVISA runs.
  • Do not close the WVISA window during the scan.
  • Use router-assisted visibility only when you own or administer the network.
Do not scan networks, systems, or accounts that you are not authorized to assess.
WVISA assessment
Endpoint checksDevice security and health
Done
Network discoveryVisible local devices
Running
Step 8

Open the report and start with the fix queue.

WVISA saves reports on the Desktop in the WVISA reports folder. The first screen should tell the customer what to fix now, what WVISA can help with, and what is technical review only.

  • Use Open Latest Report if the report does not open automatically.
  • Start with the “1 Thing To Fix Now” section.
  • Use the full technical report only when you want the execution details.
If WVISA says the report was not created, keep the terminal output and contact support with the support bundle if available.
SecurityReport.html
80
Risk level: Improving
Fix the top item first. The full report is still available.
1 Thing To Fix NowBitLocker is not enabled on the system volume.
Action
Desktop\WVISA\Reports\ENG-...\SecurityReport.html

When to contact support

These are the cases where the customer should stop instead of improvising around a warning.

Hash mismatchThe SHA-256 from PowerShell does not exactly match the success page.
Validation failedWVISA prints a runtime validation error or says package files are unexpected.
Specific malware alertAntivirus names a specific infection instead of a generic reputation or unsigned-script warning.